Security
Data handling overview
This page summarizes real architecture from the PromptShield monorepo — not marketing certifications we do not hold.
Prompt path
Optimizer and related cloud features send prompts to the PromptShield Intelligence API over HTTPS. Model provider keys remain on PromptShield servers; they are not embedded in the extension package.
Local-first data
Library, Optimization History, personalization profile, settings, onboarding progress, and free-tier quota counters live in chrome.storage.local on your device by default.
Accounts & sessions
Email verification codes, hashed refresh tokens, and subscription records live in the account database (SQLite in development; managed Postgres recommended for production). Access tokens are short-lived and validated server-side for billing routes.
Payments
Stripe processes cards and subscriptions. Webhook events are stored with idempotency keys before mutating entitlements. PromptShield does not store full PAN or CVV data.
What we do not claim
- No SOC 2 or ISO badges unless formally obtained.
- No guarantee that prompts never leave your device — cloud optimization requires API processing.
- No guarantee of specific AI output quality or safety after you send a prompt.